This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft File: caJzmyDCWcXRs4jRRT9vF5nyj2w.mft (raw, json) Hash identifier: iszltIIh3qygPMxbet1FptRmZ2k5t+tXWd7VOtJTcSA= Subject key identifier: D3:20:D0:05:31:2D:3F:1B:A7:63:45:34:8B:91:55:EC:28:0D:C8:54 Authority key identifier: 71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C Certificate issuer: /CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Certificate serial: 019B1BE0A48254B38FD83B55072F2B3DEC98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft Manifest number: 04D0 Signing time: Sun 14 Dec 2025 08:01:05 +0000 Manifest this update: Sun 14 Dec 2025 08:01:05 +0000 Manifest next update: Mon 15 Dec 2025 08:01:05 +0000 Files and hashes: 1: 5TxBRMul-Sk6vrxAy-O3Gig1UHg.roa (hash: eQW3KPMxFJcTn3nfO5KDUYdR77aYysAZcOPu9j2QK1w=) 2: NnS9tE0Wd3GJX8d4rDN6hefth0k.roa (hash: iMULd1rU9nLxXdG6/iod6VTsBhibbUWJ3DwkFA8v85s=) 3: caJzmyDCWcXRs4jRRT9vF5nyj2w.crl (hash: KUgKKLVGd0oBl35dS2jNWVAse475H3hFAqWqm6CXGNY=) 4: yI_sQi09bI0wEcczv9p69pOMi4I.roa (hash: eG5dij8lJvkaSq+tZToxmG67gJ6Yw6xpufVtIpPZnsg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 15 Dec 2025 08:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:1b:e0:a4:82:54:b3:8f:d8:3b:55:07:2f:2b:3d:ec:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71a2739b20c259c5d1b388d1453f6f1799f28f6c Validity Not Before: Dec 14 08:01:05 2025 GMT Not After : Dec 15 08:01:05 2025 GMT Subject: CN=d320d005312d3f1ba76345348b9155ec280dc854 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:ac:30:ca:24:3b:c7:89:13:5a:df:f7:ed: 70:5b:c1:fd:12:77:be:a5:d2:e7:62:83:72:15:45: 65:f2:6a:85:8b:e6:24:06:cf:bc:16:97:45:2e:19: 54:27:91:8e:76:2d:9d:f5:7e:db:9e:f8:f3:00:8d: d1:2b:af:5c:54:e7:8d:48:19:b3:e6:a7:41:cd:b4: ae:33:25:b3:c8:8e:4d:2b:7f:41:7c:3e:1c:4c:24: 5c:89:50:3a:15:a3:61:75:63:d2:6c:dd:62:cc:e6: 6f:68:94:86:5e:dc:c0:2a:24:7c:ef:39:da:5b:92: 45:d5:36:88:b8:96:f8:66:7d:e6:79:19:36:51:fe: 61:11:c3:08:36:05:55:83:a2:a2:46:19:21:9e:9a: 50:7e:11:15:19:86:e6:99:18:32:ea:3e:86:dd:ae: 8d:b4:2a:ea:79:43:a2:c3:f4:83:08:95:e7:18:04: 20:6c:a4:cd:74:9e:04:0b:e6:0e:75:b5:e3:92:92: ca:d1:10:88:5a:09:7b:68:d1:45:b8:2a:ff:56:5d: 4b:3b:9a:8e:ef:9f:57:68:be:a3:5f:11:57:6a:ca: 58:4b:db:e2:3e:65:ad:cc:67:2d:ce:ee:bd:bd:31: f2:be:85:ba:43:fe:96:3f:5d:33:09:1b:9e:60:c0: b2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:20:D0:05:31:2D:3F:1B:A7:63:45:34:8B:91:55:EC:28:0D:C8:54 X509v3 Authority Key Identifier: keyid:71:A2:73:9B:20:C2:59:C5:D1:B3:88:D1:45:3F:6F:17:99:F2:8F:6C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caJzmyDCWcXRs4jRRT9vF5nyj2w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/499df3-bd4f-4e40-8f82-a3855505ea2e/1/caJzmyDCWcXRs4jRRT9vF5nyj2w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:74:50:5a:2c:f0:96:9b:36:04:d8:51:05:89:c0:9e:d1:ff: b3:90:3c:78:f3:48:16:9d:7e:5a:57:90:3c:50:f0:ed:24:24: dc:b3:a2:3a:01:97:7b:a2:cb:66:e2:9c:d0:ce:5e:0a:83:43: f3:cf:c6:df:ea:c8:4e:d1:2e:9c:e4:9f:88:68:26:66:f5:2f: 9d:18:0e:dd:0b:55:e0:1b:f4:1f:e4:e5:f1:18:da:61:b4:e9: 4d:d7:15:e5:62:f5:6d:12:82:f6:79:7d:03:aa:7f:ea:1d:02: 0c:b1:9b:c0:66:19:5a:0e:a6:a8:0b:36:53:cc:a2:71:19:e5: 6c:2a:b9:da:64:93:cf:0c:ea:75:22:bc:1a:fa:d9:fd:59:c2: 42:3a:f4:aa:97:22:35:96:0f:3c:dc:cf:80:33:d0:0c:14:a8: 8f:58:70:ac:13:07:33:d2:2b:bd:c8:c1:df:21:6b:89:38:ed: c9:a1:41:b6:f1:04:dd:16:09:a5:a0:81:27:e5:d5:00:84:63: 90:2e:19:43:2d:b9:5b:46:80:ec:58:0f:e6:86:8f:20:7b:e7: e6:17:47:af:ad:af:33:3b:52:85:58:26:37:5f:64:23:d8:91: 0c:1e:cd:55:24:cc:24:61:ed:75:97:c2:cd:9a:f3:00:50:c2: 99:c4:95:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZsb4KSCVLOP2DtVBy8rPeyYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYTI3MzliMjBjMjU5YzVkMWIzODhkMTQ1M2Y2ZjE3OTlm MjhmNmMwHhcNMjUxMjE0MDgwMTA1WhcNMjUxMjE1MDgwMTA1WjAzMTEwLwYDVQQD EyhkMzIwZDAwNTMxMmQzZjFiYTc2MzQ1MzQ4YjkxNTVlYzI4MGRjODU0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoumsMMokO8eJE1rf9+1wW8H9Ene+ pdLnYoNyFUVl8mqFi+YkBs+8FpdFLhlUJ5GOdi2d9X7bnvjzAI3RK69cVOeNSBmz 5qdBzbSuMyWzyI5NK39BfD4cTCRciVA6FaNhdWPSbN1izOZvaJSGXtzAKiR87zna W5JF1TaIuJb4Zn3meRk2Uf5hEcMINgVVg6KiRhkhnppQfhEVGYbmmRgy6j6G3a6N tCrqeUOiw/SDCJXnGAQgbKTNdJ4EC+YOdbXjkpLK0RCIWgl7aNFFuCr/Vl1LO5qO 759XaL6jXxFXaspYS9viPmWtzGctzu69vTHyvoW6Q/6WP10zCRueYMCyIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNMg0AUxLT8bp2NFNIuRVewoDchUMB8GA1UdIwQY MBaAFHGic5sgwlnF0bOI0UU/bxeZ8o9sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODIt YTM4NTU1MDVlYTJlLzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZC80OTlkZjMtYmQ0Zi00ZTQwLThmODItYTM4NTU1MDVlYTJl LzEvY2FKem15RENXY1hSczRqUlJUOXZGNW55ajJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbXRQWizw lps2BNhRBYnAntH/s5A8ePNIFp1+WleQPFDw7SQk3LOiOgGXe6LLZuKc0M5eCoND 88/G3+rITtEunOSfiGgmZvUvnRgO3QtV4Bv0H+Tl8RjaYbTpTdcV5WL1bRKC9nl9 A6p/6h0CDLGbwGYZWg6mqAs2U8yicRnlbCq52mSTzwzqdSK8GvrZ/VnCQjr0qpci NZYPPNzPgDPQDBSoj1hwrBMHM9IrvcjB3yFriTjtyaFBtvEE3RYJpaCBJ+XVAIRj kC4ZQy25W0aA7FgP5oaPIHvn5hdHr62vMztShVgmN19kI9iRDB7NVSTMJGHtdZfC zZrzAFDCmcSV4w== -----END CERTIFICATE-----Generated at Sun Dec 14 16:54:54 2025 by rpki-client